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What Is Claimed Is: 

1 1. A method of providing a desired set of service policies to each of a plurality of 

2 subscribers, said method comprising: 

3 identifying a plurality of processing rules which provide a set of service policies 

4 desired by each subscriber; 

5 configuring an internet service node with said processing rules corresponding to each 

6 of said subscribers; 

7 receiving data in said internet service node; 

8 determining in said internet service node a specific subscriber to whom said received 

9 data relates to; and 

1 0 applying in said internet service node said plurality of processing rules related to said 

1 1 determined specific subscriber, wherein said applying is performed after said determining. 

1 2. The method of claim 1 , wherein said internet service node is provided as an edge 

2 device of an access network such the service policies can be controlled from the edge of said 

3 access network. 

1 3. The method of claim 2, wherein said internet service node comprises an edge router. 

1 4. The method of claim L wherein said internet service node comprises a plurality of 

2 processors, said determining and applying together comprises: 

3 assigning each of said subscribers to a processor group, wherein each processor group 

4 is configured with the processing rules corresponding to the assigned subscribers; and 

5 forwarding data related to each subscriber to a corresponding processor group after 

6 said determining of specific subscriber. 

1 5. The method of claim 4, wherein each processor group comprises a plurality of 

2 processors. 

1 6. The method of claim 4, wherein data related to subscribers assigned to said 

2 processor group is assigned in a round-robin fashion among said plurality of processors. 
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1 7. The method of claim 4, wherein end systems of said plurality of subscribers 

2 generate data using internet protocol (IP). 

1 8. The method of claim 7, wherein said data comprises ATM cells. 

1 9. The method of claim 8, wherein said determining comprises examining data 

2 contained in said ATM cells, said determination of specific subscriber being based on the 

3 results of said examination and a port on which said ATM cells are received, wherein said port 

4 is comprised in said internet service node. 

10. The method of claim 9, wherein said applying comprising: 
deciding in said port the specific processor group to which said data is to be forwarded, 

wherein said specific processor group is decided based on said specific subscriber to whom 
said received data relates to; and 

modifying the header of said cells to indicate said determined processor group such 
that the cells can be forwarded to an appropriate processor group based on examination of cell 
header, wherein said ^propriate processor group is configured with the processing rules relate 
to said specific subscriber. 

1 1 . The method of claim 1 0, wherein said deciding is performed using a content 
addressable memory (CAM), said CAM containing a plurality of locations, each of said 
plurality of locations having a mask, a search field and an outfield field, said CAM being 
designed to receive an input value and compare said input value with data in said search field 
at bit positions specified by said mask for each of said plurality' of locations, said CAM being 
designed to generate as output the data stored in said output field if there is a match with the 
corresponding location. 

12. The method of claim 1 1, wherein the data stored in the output field of said CAM 
identifies an identifier of a processor group either directly or indirectly, and wherein each 
entry of said mask and search field are implemented to store data identifying a subscriber such 
that said identifier can be determined using said data stored in said output field. 
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1 13. The method of claim 12, wherein a ponion of the header of said ATM cells 

2 replaced with said identifier such that said ATM cells can be assigned to a processor group 

3 designed to process data related to said subscriber by examining said header. 



is 



1 



14. The method of claim 13, wherein said identifier is stored in a virtual path identifier 



2 (VPI) or virtual channel identifier (VCI) field of said header. 



1 



15. The method of claim 12, wherein bytes 1, 7, 8, 10, and 13-20 of an IP header 



are 



2 provided as said input to said CAM. 



1 16. The method of claim 13, wherein a switch fabric forwards said data to said 

2 processor group based on an examination of said header of said ATM cells. 

' 17. The method of claim 13, further comprising: 

2 storing a mapping of virtual path identifier/virtual channel identifier (VPWCI) and 

3 port number to a connection identifier in a virtual channel (VC) table, wherein each entry of 

4 said VC table further indicates whether the VPWCI of a received cell needs to be replaced; 

5 and 

6 accessing an entry in said VC table corresponding to a received cell comprised in said 

7 received data, 

8 wherein said header of said received cell is modified only if the data in said entry 

9 indicates that the VPWCI field is to be replaced. 

1 18. The method of claim 17, further comprising: 

2 setting the VCI of cells forming said received data to said connection identifier; 

3 generating a processor identifier or a processor group identifier using said output of 

4 said CAM; and 

5 setting the VPI of said sequence of cells to said processor identifier or said processor 

6 group identifier, 

7 wherein said switch fabric uses said VPI to forward said sequence of cells to one of 

8 said processors. 
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1 19. The method of claim 12, further comprising setting said mask of a location to 

2 examine at least some of the bit positions corresponding to an IP address, and said search field 

3 of said location to a plurality of IP addresses in combination with said mask, wherein at least 

4 some of said IP addresses are associated with said subscriber. 

1 20. The method of claim 1 9, wherein each of said IP addresses comprises an IP source 

2 address. 

1 21. The method of claim 19, wherein each of said IP addresses comprises an IP 

2 destination address. 

1 22. The method of claim 19, further comprises: 

2 maintaining an IP table mapping each of said plurality of IP addresses to a processor 

3 identifier or a processor group identifier; and 

4 using bits in the masked positions of the IP address of said IP packet and said output 

5 of said CAM to retrieve said processor identifier or said processor group identifier, 

6 wherein said sequence of cells are assigned to a processor identified by said processor 

7 identifier or said processor group identified by said processor group identifier. 

1 23. The method of claim 12, wherein said search field does not contain sufficient 

2 number of bits to store data identifying said subscriber, said method further comprising: 

3 storing in a plurality of entries of said CAM data identifying said subscriber, wherein 

4 the output of said pluralit>^ of entries is examined in determining said processor identifier or 

5 processor group identifier. 

1 24. The method of claim 23, wherein the output of one of said plurality of entries is 

2 used as an input to another one of said plurality of entries of said CAM, wherein the output 

3 of said another of said plurality' of entries identifies said processor identifier or processor 

4 group identifier. 



1 

2 



25. The method of claim 23, wherein received data related to said subscriber is 
received using an L2TP tunnel. 
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1 26. The method of claim 25, further comprises: 

2 providing bytes 1. 7, 8, 10, 13-15, and 17-20 of the IP packet contained in a first cell 

3 of said received data as a first input; and 

4 providing bytes 23. 24, and 27-37 of the IP packet contained in said first cell as a 

5 second input. 



27. A method of providing a desired set of service policies to each of a plurality of 
subscribers, said method comprising: 

(a) providing an internet service node (ISN) as an edge router; 

(b) specifying a desired set of service policies for each of said plurality of subscribers; 

(c) translating each of said desired service policies into processing rules, wherein each 
processing rule comprises a classifier and an associated action, wherein said classifier 
identifies data flows to which said associated action is to be applied: 

(d) configuring said ISN with said processing rules; 

(e) receiving a plurality of bit groups fi-om a subscriber comprised in said plurality of 
subscribers; 

(f) generating a plurality of packets fi-om data contained in said plurality of bit groups, 
wherein each of said plurality of packets can be associated with a data flow generated by an 
application of said subscriber; 

(g) determining a data flow to which each of said plurality of packets relates to; and 

(h) applying said actions associated with classifiers matching said data flow determined 

in (g), 

whereby each of said plurality of subscribers are provided said corresponding desired 
set of service policies. 

28. The method of claim 27, wherein end systems of said plurality of subscribers 
generate data using intemet protocol (IP) and (f) comprises generating a plurality of IP 
packets. 



29. The method of claim 28, wherein said bit groups comprise ATM cells, and 
wherein said plurality of packets are generated from said ATM cells. 
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1 30. The method of claim 28, further comprising maintain a state for one of said 

2 plurality of service policies, wherein said state enables multiple data flows to be processed to 

3 meet the service. 



1 3 1 . The method of claim 28, further comprising maintaining a state for each of said 

2 data flows, wherein the processing rules to be applied to packets of each flow is maintained 

3 in said state. 



1 32. The method of claim 28, further comprising: 

2 (i) monitoring control data flow of an application to determine the port number of a 

3 new data flow initiated by an application; and 
(j) generating a new processing rule using the determined port number. 

33. The method of claim 27, further comprising: 

(k) providing a plurality of processor groups, with each processor group containing a 
plurality of processors; and 

(1) assigning each of said packets to one of said pliarality of processor groups, wherein 
one of said plurality of processors in said assigned groups processes the assigned packets. 

34. The method of claim 33, wherein all packets related to a subscriber are assigned 
to a single processor group. 

35. The method of claim 34, further comprising assigning packets to individual 
processors in a round-robin fashion. 



36. A method of assigning an internet protocol (IP) packet related to a subscriber to 
a processor in an internet service node (ISN), said ISN containing a plurality of processors, 
wherein said processor is capable of processing said IP packet to provide service policies 
desired for said subscriber, said method comprising: 

(a) configuring a location of a content addressable memory (CAM), said CAM 
containing a plurality of locations including said location, each of said plurality of locations 
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7 having a mask, a search field and an outfield field, said CAM being designed to receive an 

8 input value and compare said input value with data in said search field at bit positions 

9 specified by said mask for each of said plurality of locations, said CAM being designed to 

1 0 generate as output the data stored in said output field if there is a match with the coiresponding 

1 1 location, said search field and said mask of said location being configured with data 

1 2 identifying said subscriber, said output field of said location being set to data identifying one 

1 3 or more processors suitable for processing data related to said subscriber; 

1 4 (b) receiving said IP packet in the form of a sequence of cells including a first cell 

1 5 containing the header data of said IP packet; 

1 6 (c) providing data in said first cell as said input value to said CAM; 

1 7 (d) receiving as an output of said CAM the data stored in said output field of a location 

1 8 if the con-esponding search field matches said input value at the bit positions specified by the 

19 corresponding mask; and 

20 (e) assigning said sequence of cells to said one or more processors identified by said 

2 1 output received in (d), 

22 whereby said IP packet is assigned to said one or more processors suitable for 

23 processing said IP packet if the data in said first cell matches data stored in said location at bit 

24 positions specified by said mask of said location. 

1 37. The method of claim 36, wherein said data provided in (c) comprises bytes 1 , 7, 

2 8, 10, and 13-20 of said IP header. 

1 3 8. The method of claim 36, wherein said output of (d) identifies a processor group 

2 suitable for processing said IP packet and said processor group includes said one or more 

3 processors assigned to in (e). 

1 3 9. The method of claim 3 6, wherein a switch fabric forwards each cell to one of said 

2 one or more processors according to the cell header, and (e) comprises modifying the cell 

3 header of said sequence of cells. 

1 40. The method of claim 4, fiuther comprising: 

2 (f) storing a mapping of virtual path identifier/virtual channel identifier ( VP WCI) and 
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3 port number to a connection identifier in a virtual channel (VC) table, wherein each entry of 

4 said VC table further indicates whether the VP WCI of a received cell needs to be replaced; 

5 (g) accessing an entry in said VC table corresponding to said first cell; and 

6 (h) performing (c) - (e) only if said retrieved entrv- indicates that the VPWCI of said 

7 first cell needs to be replaced. 



41. The method of claim 5, wherein (e) comprises: 
(i) setting the VCI of said sequence of cells to said connection identifier; 
0) generating a processor identifier or a processor group identifier using said output 
of (d); and 

(k) setting the VPI of said sequence of cells to said processor identifier or said 
processor group identifier, 

wherein said switch fabric uses said VPI to forward said sequence of cells to one of 
said processors. 



42. The method of claim 36, wherein (a) comprises setting said mask of said location 
to examine at least some of the bit positions corresponding to an IP address, and said search 
field of said location to a pluralit>- of IP addresses in combination with said mask, wherein at 
least some of said IP addresses are associated with said subscriber. 

43. The method of claim 42, wherein each of said IP addresses comprises an IP source 
address. 

44. The method of claim 43, wherein each of said IP addresses comprises an IP 
destination address. 



45. The method of claim 42, said method further comprises: 

(1) maintaining an IP table mapping each of said pluralit>- of IP addresses to a processor 
identifier or a processor group identifier; and 

(m) using bits in the masked positions of the IP address of said IP packet and said 
output of (e) to retrieve said processor identifier or said processor group identifier, wherein 
said processor group comprises a plurality of processors, 
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7 wherein said sequence of cells are assigned to a processor identified by said processor 

8 identifier or said processor group identified by said processor group identifier. 

1 46. The method of claim 36, wherein said search field does not contain sufficient 

2 number of bits to store data identifying said subscriber, said method further comprising: 

3 (n) storing said data and corresponding masks identifying said subscriber in more than 

4 one of said locations; 

5 (o) providing different portions of said data as different inputs to said CAM, wherein 

6 said input of (c) is provided last; and 

7 (p) using said output of (d) to identify said processor or processor group for processing 

8 only if matches exist for all of said different inputs. 

1 47. The method of claim 46, wherein subscriber data is received using an L2TP tunnel. 

1 48. The method of claim 46, wherein (n) comprises: 

2 (q) providing bytes 1, 7, 8, 10, 13-15, and 17-20 of the IP packet contained in said first 

3 cell as a first input; and 

4 (r) providing bytes 23, 24, and 27-37 of the IP packet contained in said first cell as a 

5 second input. 

1 49. A method of assigning a cell to one of a pluralit}' of processors comprised in an 

2 internet service node (ISN), said method comprising: 

3 (a) configuring a content addressable memory (CAM) comprising a plurality of 

4 locations, each of said plurality of locations having a mask, a search field and an outfield field, 

5 said CAM being designed to receive an input value and compare said input value with data 

6 in said search field at bit positions specified by said mask for each of said plurality of 

7 locations, 

8 said search field, said mask and said output field of a first location comprised in said 

9 plurality of locations being configured with first a first search \'alue, a first mask value and a 

10 first output value respectively, said search field, said mask and said output field of a second 

1 1 location comprised in said plurality of locations being configured with a second search value, 

12 a second mask and a second output value respectively, 
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1 3 wherein said first search value, said first mask value and said first output value are not 

14 equal to said second search value, said second mask and said second output value respectively 

1 5 and wherein said first output value and said second output value contain data identifying one 

1 6 or more processors comprised in said plurality of processors: 

1 7 (b) receiving said cell in said ISN; 

18 (c) providing data in said first cell as said input value to said CAM; 

1 9 (d) receiving as an output of said CAM the data stored in said output field of a location 

20 if the corresponding search field matches said input value at the bit positions specified by the 

21 corresponding mask; and 

22 (e) assigning said cell to a processor identified by said output received in (d). 

1 50. The method of claim 49, wherein said cells is a header cell of a sequence of cells 

2 forming a packet, said method fiirther comprising assigning all of said sequence of cells to said 

3 processor. 

1 51. An internet service node (ISN) for providing a desired set of service policies 

2 desired by each of a plurality of subscribers, said ISN comprising: 

3 a plurality of processors, wherein each of said plurality of subscribers is assigned to 

4 a subset of said plurality of processors, wherein said subset of said processor is configured 

5 with processing rules which provide a set of service policies desired by said corresponding 

6 subscriber; 

7 a port coupled to receive data related to one of said plurality of subscribers, said port 

8 determining a subset of processors which are designed to process data related to said one of 

9 said plurality of subscribers; and 

10 a switch fabric coupled to said plurality of processors and said port, wherein said 

11 switch fabric receives said data from said port and forwards said data to said subset of 

12 processors according to the determination of said port. 

1 52. The ISN of claim 51, wherein each of said set of said plurality of processors is 

2 provided as a processor group in a packet service card, wherein said packet service card 

3 contains a plurality of processor groups, and wherein said ISN contains a plurality of packet 

4 service cards. 
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1 53. The ISN of claim 5L wherein said port receives said data as a sequence of ATM 

2 cells. 

1 54. The ISN of claim 53, wherein said port determines an identifier of said subset of 

2 processors and sends said identifier to said switch fabric, wherein said switch fabric assigns 

3 said ATM cells to said subset of processors based on said identifier. 

1 55. The ISN of claim 54, wherein said port modifies a header of each of said ATM 

2 cells to include said identifier in said header such that said switch fabric can forward said 

3 ATM cells to said subset of processors by examining said header. 

1 56. The ISN of claim 55, wherein said port comprises: 

2 a framer to receive said data related to said one of said plurality of subscribers: 

3 a content addressable memory (CAM) containing a plurality of locations, each of said 

4 plurality of locations having a mask, a search field and an outfield field, said CAM being 

5 designed to receive an input value and compare said input value with data in said search field 

6 at bit positions specified by said mask for each of said plurality of locations, said CAM being 

7 designed to generate as output the data stored in said output field if there is a match with the 

8 corresponding location, wherein the data stored in the output field of said CAM identifies an 

9 identifier of a processor group either directly or indirectly, and wherein each entry of said 

10 mask and search field are implemented to store data identifying a subscriber such that said 

1 1 identifier can be determined using said data stored in said output field; and 

12 an assignment logic coupled to said CAM and said framer, said assignment logic 

13 determining said identifier by providing the received data as an input to said CAM, said 

14 assignment logic including said identifier in said header. 

1 57. The ISN of claim 56, wherein said identifier is stored in a virtual path identifier 

2 (VPI) or virtual channel identifier (VCI) field of said header. 



I 

2 



58. The ISN of claim 57, wherein said sequence of cells contain an Internet Protocol 
(IP) packet, and said assignment logic provides bytes L 7, 8, 10, and 13-20 of an IP header 
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3 as said input to said CAM. 

1 59. The ISN of claim 57, further comprising: 

2 a virtual channel table storing a mapping of vinual path identifier/virtual channel 

3 identifier (VPWCI) and port number to a connection identifier, wherein each entry of said 

4 VC table further indicates whether the VPWCI of a recei\'ed cell needs to be replaced, 

5 wherein said assignment logic accesses an entry in said VC table corresponding to a received 

6 cell comprised in said received data, and modifies said header only if data in said entry 

7 indicates that the VPIA^CI field is to be replaced. 

1 60. The ISN of claim 59, wherein said assignment logic sets the VCI of cells forming 

2 said received data to said connection identifier and said VPI of said cells to said identifier. 

1 61. The ISN of claim 56, wherein said search field does not contain sufficient number 

2 of bits to store data identifying said subscriber, and wherein said CAM is designed to store in 

3 a plurality of entries data identifying said subscriber, wherein said assignment logic examines 

4 the output of said pluralit\^ of entries in determining said identifier. 

1 62. The ISN of claim 6 1 , wherein said assignment logic uses the output of one of said 

2 plurality of entries as an input to another one of said pluralit\ of entries, wherein the output 

3 of said another of said pluralitj^ of entries identifies said processor identifier or processor 

4 group identifier. 

1 63. The ISN of claim 61 , wherein data related to said subscriber is received using an 

2 L2TP tunnel. 

1 64. The ISN of claim 62, wherein said assignment logic is designed to provide bytes 

2 1, 7, 8, 10, 13-15, and 17-20 of the IP packet contained in a first cell of said received data as 

3 a first input, and bytes 23. 24, and 27-37 of the IP packet contained in said first cell as a 

4 second input. 



65. An internet service node (ISN) for providing a desired set of service policies 



9 



10 



1: 14 



wo 00/33204 PCT/US99/28292 

51 

desired by each of a plurality of subscribers, said ISN comprising: 

3 an access port to receive a plurality of bit groups related to a subscriber comprised in 

4 said plurality of subscribers; 

5 a switch fabric coupled to said access port, said switch fabric to receive said plurality 

6 of bit groups and generating a plurality of packets, wherein said plurality of packets contain 

7 the data generated from applications related to said subscriber, wherein each of said plurality 

8 of packets contains sufficient data to be identified with a data flow generated by said 

9 applications related to said subscriber; 
a packet service card to receive said plurality of packets, said packet service card 

1 1 processing each of said packets according to a plurality of processing rules related to said 

12 subscriber, 

1 3 wherein each of said plurality of processing rules contain a classifier and an associated 
action, said classifier identifying at least one data flow to which said associated action is to be 

15 applied, 

16 a trunk port coupled to said switch fabric, said trunk port for transmitting any of said 

17 plurality of packets desired to be transmitted, 

18 wherein providing a corresponding plurality of processing rules to each of said 
plurality of subscribers enables said ISN to provide said desired set of service for each of said 

% 20 plurality of subscribers. 

1 66. The ISN of claim 65, wherein said plurality of packets comprise Internet Protocol 

2 (IP) packets. 

1 67. The ISN of claim 66, wherein each of said data flows is identified by source IP 

2 address, destination IP address, protocol type, source port number and destination port 

3 number. 

1 68. The ISN of claim 67, further comprising an interface for enabling a manager to 

2 provide said desired set of service policies, and wherein said ISN is designed to generate at 

3 least some of said processing rules based on said desired set of service policies provided by 

4 said manager. 



^ 19 
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69. The ISN of claim 68, wherein said packet service card is designed to monitor 
control data flows of an application to determine the parameters values identifying said data 
flows of said application if said parameter values are not available beforehand. 

70. The ISN of claim 65, wherein said packet service card comprises a plurality of 
processors, wherein said plurality of processors enable said ISN to process said plurality of 
packets quickly. 

71. The ISN of claim 70, wherein said plurality of processors are provided in a 
separate physical unit from said access port and said trunk port, wherein the separation enables 
the number of processors to be changed independent of the number of access ports and trunk 
ports. 

72. The ISN of claim 70, wherein a state is maintained for each of said processing 
flows, wherein said state indicates the processing rules to be applied to each of said plurality 
of packets related to the corresponding flow. 

73. The ISN of claim 65, wherein said brtgroups comprise ATM cells such that said 
switch fabric is designed to convert to generate e^h of said packets from the payload in a 
plurality pf ATM cells. \ 

74. The ISN of claim 65, wherein said bit groups comprise contain sufficient data to 
be identified with a data flow generated by said applications related to said subscriber such 
that each of said packets is generated from one of said bit groups. 

75. The ISN of claim 65, further comprising a random access memory (RAM), 
wherein said processor interface stores said plurality of bit groups in said RAM. 

76. An internet service node (ISN) for processing a packet comprising a sequence of 
cells including a header cell, said ISN comprising: 

a plurality of processors; 

a content addressable memory (CAM) containing a plurality of locations, each of said 
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5 plurality of locations having a mask, a search field and an outfield field, said CAM being 

6 designed to receive an input value and compare said input value with data in said search field 

7 at bit positions specified by said mask for each of said pluralit>' of locations, said CAM being 

8 designed to generate as output the data stored in said output field if there is a match with the 

9 corresponding location, said search field and said mask of said location being configured with 

1 0 data identifying packets suitable for processing by one or more of said plurality of processors, 

1 1 said output field being configured with data identifying one or more processors suitable for 

12 processing a corresponding packet; and 

^ 3 an assignment logic to necei ve said header cell and providing data from said header cell 

14 as said input value of said CAM, whereby the output of said CAM identifies one or more 

15 processors suitable for processing said packet, said assignment logic assigning all of said 

16 sequence of cells to said one or more processors according to said output of said CAM. 

17 wherein said packet is processed by a suitable processor. 

1 77. The ISN of claim 76, wherein said assignment logic is designed to assign said 

2 sequence of cells by setting at least a portion of the cell header of each cell to said identifier, 

3 said ISN further comprising a switch fabric which forwards said sequence of cells to 

4 processors according to cell headers. 

1 78. The ISN of claim 77, wherein said ISN receives packets related to a plurality of 

2 subscribers, and wherein the mask and search fields of each location are configured to identify 

3 a subscriber, and wherein the corresponding output field is designed to identify one or more 

4 of said processors suitable for processing packets related to the subscriber identified by the 

5 corresponding mask field and search field. 

1 79. The ISN of claim 78, wherein said packet comprises an IP packet. 

1 80. The ISN of claim 79, wherein said mask of a location is configured for 

2 examination of at least some of the bit positions corresponding to an IP address, and said 

3 search field of said location to a plurality of IP addresses in combination with said mask, 

4 wherein at least some of said IP addresses are associated with said subscriber. 



3 
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1 8 1 . The ISN of claim 80, wherein each of said IP addresses comprises an IP source 

2 address. 



82. The ISN of claim 80, wherein each of said IP addresses comprises an IP 
destination address. 



83. The ISN of claim 80, further comprising a memor>- for storing an IP table mapping 
2 each of said plurality of IP addresses to a processor identifier or a processor group identifier, 
wherein said assignment logic is designed to use bits in the masked positions of the IP address 

4 and the output of said CAM to retrieve said identifier, wherein said sequence of cells are 

5 assigned to one or more processors according to said identifier. 

1 84. The ISN of claim 79, wherein said search field does not contain sufficient number 

2 of bits to store data identifying each subscriber, and wherein said CAM is configured to store 

3 said data and corresponding masks identifying said subscriber in more than one of said 

4 locations, and wherein said assignment logic is designed to send different portions of said data 

5 as different inputs to said CAM, wherein said assignment logic determines that said packet 

6 relates to a subscriber only upon a match for all of said inputs. 

1 85. The ISN of claim 84, wherein said assignment logic is designed to provide bytes 

2 1 , 7, 8, 1 0, 1 3- 1 5, and 1 7-20 of the IP packet contained in said header cell as a first input, and 

3 bytes 23, 24, 27-37 of the IP packet contained in said header cell as a second input. 

1 86. The ISN of claim 78, further comprising a service manager which configures said 

2 CAM to cause packets related to said subscriber to said one or more of said processors, 

3 wherein said service manager further configures said one or more processors with processing 

4 rules suitable for processing said packets related to said subscriber. 

1 87. The ISN of claim 86, further comprising an access port,'wherein said access port 

2 contains said CAM and said assignment logic. 



88. The ISN of claim 86, further comprising a trunk port, wherein said trunk port 
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contains said CAM and said assignment logic. 

89. An internet service node (ISN) providing a desired set of service policies to each 
of a plurality of subscribers, said ISN comprising: 

identifying means for identifying a plurality of processing rules which provide a set 
of service policies desired by each subscriber; 

configuration means for configuring an internet service node with said processing rules 
corresponding to each of said subscribers: 

receiving means for receiving data in said internet ser\qce node; 

determination means for determining in said intemet service node a specific subscriber 
to whom said received data relates to; and 

applying means for applying in said intemet service node said plurality of processing 
rules related to said determined specific subscriber, wherein said applying is performed after 
said determining. 

90. The ISN of claim 89, wherein said intemet service node is provided as an edge 
device of an access network such the service policies can be controlled from the edge of said 
access network. 

91. The ISN of claim 89, wherein said ISN comprises a plurality of processors, said 
determination means and applying means together comprise: 

assigrmient means for assigning each of said subscribers lo a processor group, wherein 
each processor group is configured with the processing rules corresponding to the assigned 
subscribers; and 

forwarding means for forwarding data related to each subscriber to a corresponding 
processor group after said determining of specific subscriber. 

92. The ISN of claim 91, wherem end systems of said plurality of subscribers generate 
data using intemet protocol (IP). 



93. The ISN of claim 92, wherein said data comprises ATM cells. 
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94. The ISN of claim 93, wherein said assignment means comprises examination 
means for examining data contained in said ATM cells, said determination of specific 

3 subscriber being based on the results of said examination and a port on which said ATM cells 

4 are received, wherein said port is contained in said internet service node. 

1 95. The ISN of claim 94, wherein said assignment means further comprises modifying 

2 means for modifying the header of said cells to indicate said determined processor group such 

3 that the cells can be forwarded to an appropriate processor group based on examination of cell 

4 header, wherein said appropriate processor group is configured with the processing rules relate 

5 to said specific subscriber. 



